Analysis
-
max time kernel
124s -
max time network
62s -
platform
windows7_x64 -
resource
win7v20201028 -
submitted
24-03-2021 17:45
Static task
static1
Behavioral task
behavioral1
Sample
b05b352e8d009c6ee3231be0ef6032d17104bd7e2c8126b07bd811f2760eca5e.dll
Resource
win7v20201028
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
b05b352e8d009c6ee3231be0ef6032d17104bd7e2c8126b07bd811f2760eca5e.dll
Resource
win10v20201028
windows10_x64
0 signatures
0 seconds
General
-
Target
b05b352e8d009c6ee3231be0ef6032d17104bd7e2c8126b07bd811f2760eca5e.dll
-
Size
65KB
-
MD5
4c557f3f2587ff4c3056a75f0c627166
-
SHA1
7f69cf9ad2d9461a4130f91a05ba9799de735f09
-
SHA256
b05b352e8d009c6ee3231be0ef6032d17104bd7e2c8126b07bd811f2760eca5e
-
SHA512
41900e382f2744a6112970d5858438e7dc9aea4f4112bcaf51919215959ac8f981d7aea8fa41892dfa967ade5dd651cee080f4c61af61f14834fa0be1870f1d3
Score
10/10
Malware Config
Extracted
Family
icedid
Campaign
3683573724
C2
24savetonnofmaoney.xyz
Signatures
-
IcedID First Stage Loader 1 IoCs
Processes:
resource yara_rule behavioral1/memory/1340-3-0x0000000000130000-0x0000000000137000-memory.dmp IcedidFirstLoader -
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes:
regsvr32.exepid process 1340 regsvr32.exe 1340 regsvr32.exe